Re: [core] Review draft-tiloca-core-oscore-discovery-04

Christian M. Amsüss <christian@amsuess.com> Wed, 20 November 2019 10:07 UTC

Return-Path: <christian@amsuess.com>
X-Original-To: core@ietfa.amsl.com
Delivered-To: core@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 817551208D2 for <core@ietfa.amsl.com>; Wed, 20 Nov 2019 02:07:44 -0800 (PST)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -0.412
X-Spam-Level:
X-Spam-Status: No, score=-0.412 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, FAKE_REPLY_C=1.486, SPF_HELO_NONE=0.001, SPF_NONE=0.001] autolearn=ham autolearn_force=no
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id 7b96Apflhhzr for <core@ietfa.amsl.com>; Wed, 20 Nov 2019 02:07:42 -0800 (PST)
Received: from prometheus.amsuess.com (prometheus.amsuess.com [5.9.147.112]) (using TLSv1.2 with cipher ADH-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 7EAA4120827 for <core@ietf.org>; Wed, 20 Nov 2019 02:07:42 -0800 (PST)
Received: from poseidon-mailhub.amsuess.com (095129206250.cust.akis.net [95.129.206.250]) by prometheus.amsuess.com (Postfix) with ESMTPS id E1231471F0 for <core@ietf.org>; Wed, 20 Nov 2019 11:07:39 +0100 (CET)
Received: from poseidon-mailbox.amsuess.com (unknown [IPv6:2a02:b18:c13b:8010:a800:ff:fede:b1bf]) by poseidon-mailhub.amsuess.com (Postfix) with ESMTP id BB65D36 for <core@ietf.org>; Wed, 20 Nov 2019 11:07:38 +0100 (CET)
Received: from hephaistos.amsuess.com (unknown [IPv6:2a02:b18:c13b:8010:ec07:473d:44eb:151c]) by poseidon-mailbox.amsuess.com (Postfix) with ESMTPSA id 515C36E for <core@ietf.org>; Wed, 20 Nov 2019 11:07:38 +0100 (CET)
Received: (nullmailer pid 717677 invoked by uid 1000); Wed, 20 Nov 2019 10:07:34 -0000
Date: Wed, 20 Nov 2019 11:07:34 +0100
From: "Christian M. Amsüss" <christian@amsuess.com>
To: core@ietf.org
Message-ID: <20191120100734.GA717484@hephaistos.amsuess.com>
MIME-Version: 1.0
Content-Type: multipart/signed; micalg="pgp-sha256"; protocol="application/pgp-signature"; boundary="VS++wcV0S1rZb1Fb"
Content-Disposition: inline
In-Reply-To: <022101d59f70$9a9cf9b0$cfd6ed10$@augustcellars.com>
User-Agent: Mutt/1.12.2 (2019-09-21)
Archived-At: <https://mailarchive.ietf.org/arch/msg/core/bUlyq1zHYk5-YWV7RgTkdUkQ21k>
Subject: Re: [core] Review draft-tiloca-core-oscore-discovery-04
X-BeenThere: core@ietf.org
X-Mailman-Version: 2.1.29
Precedence: list
List-Id: "Constrained RESTful Environments \(CoRE\) Working Group list" <core.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/core>, <mailto:core-request@ietf.org?subject=unsubscribe>
List-Archive: <https://mailarchive.ietf.org/arch/browse/core/>
List-Post: <mailto:core@ietf.org>
List-Help: <mailto:core-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/core>, <mailto:core-request@ietf.org?subject=subscribe>
X-List-Received-Date: Wed, 20 Nov 2019 10:07:44 -0000

Hello Jim,

> Need to go here as well.
This too.

just picking the points I feel I have something to say about:

> * Should this document be re-written to only use CoRAL-reef?

I don't think so in general for time line reasons. (There's no concrete
pressure on this as far as I know of, but CoRAL still has no forseeable
timeline).

What I could see us do is having both in examples, and possibly even
accept that some features are not as optimized or usable in link-format
but can be in CoRAL. (The link from the join resource to the
authorization server, on which there was the comment today from
proxy-Klaus, comes to mind.)

> * Section 5 - I don't care if you specify the same application group
> multiple times.   I don't want to have to figure out how to check this one
> thing and error.  Plus the end result will always be the same anyway

Considering the paragraph below that, the app-gp paragraph can be vastly
simplified anyway, and I think we already have an item about making this
less normative. (The link's content is normative; how it's looked up in
an RD is just a description of the combined steps).

> * Section 5.1 - I think the anchor in the response is supposed to be absent.

The anchor needs to be there because it's an RD lookup result, and the
RD needs to fill in the anchor because it could be relevant for
interpreting the implied "hosts" relation or any non-target link
attributes (which I usually claim should not be registered, but that's
what we arrived at RD for 6690 compatibility).

Thanks for your input
c

-- 
To use raw power is to make yourself infinitely vulnerable to greater powers.
  -- Bene Gesserit axiom